Page 1 of 2

view host -> Not Authorized

Posted: Tue Jun 19, 2012 2:41 pm
by jbennett
Just to simplify things:

I have users who can see host A but not host B. These users can see host B and all related services in an overview and can see that host B is showing up as down in host view.

However, as soon as these users click on host B to look at the host detail page, they're presented with an error telling them "Not Authorized. You are not authorized to view the requested object, or the object does not exist."

These users can view other hosts, which appear to be set up in an identical way from what I can see on the settings for each host.

I have checked to make sure that the hosts are all set to have this contact group, and they are.

Is there something else I'm missing here?

Re: view host -> Not Authorized

Posted: Tue Jun 19, 2012 4:55 pm
by scottwilkerson
What does this user have specified in the user settings under Admin-> Manage Users-> Modify -> Security Settings

Re: view host -> Not Authorized

Posted: Wed Jun 20, 2012 8:14 am
by jbennett
User
Can control all hosts and services & Can access advanced features.

If I check Can see all hosts and services then they are seeing items which they don't need to.

Re: view host -> Not Authorized

Posted: Wed Jun 20, 2012 10:54 am
by lmiltchev
If you don't want to use the "Can see all hosts and services" option, you will have to add this user as a monitoring contact to Host A and Host B. Did you try adding this contact to these two hosts directly or you did this through a contact group?

Re: view host -> Not Authorized

Posted: Mon Jun 25, 2012 11:21 am
by jbennett
I have added this contact through a contact group.

I guess I'm a bit confused since I have a number of other hosts where these contacts are added as part of a contact group (and not added individually as a contact), yet they're able to see the host without this message.

I've checked another host which these contacts are able to see just fine and they too have the contact group selected, just the same.

Is there something else that I'm missing that might cause this?

EDIT: I just tested adding this contact individually to one of the hosts where they were getting 'Not Authorized', applied the config, then masqueraded as that user again. They still have the same error about not being authorized.

Re: view host -> Not Authorized

Posted: Mon Jun 25, 2012 1:34 pm
by lmiltchev
What version of Nagios XI are you using?

We will have to take a look at your configs. Go to the Core Config Manager->Configuration Snapshots->go to the latest snapshot, click on both actions buttons, save both files (the txt and tar.gz), and send them to me via PM. Thanks!

Re: view host -> Not Authorized

Posted: Mon Jun 25, 2012 3:59 pm
by jbennett
I am running Nagios XI 2011R2.3.

Sending information now.

Thanks so much for your assistance.

Re: view host -> Not Authorized

Posted: Tue Jun 26, 2012 9:26 am
by lmiltchev
One more thing... Can these users see both hosts if they log in the Nagios Core web interface?

Code: Select all

http://<IP>/nagios

Re: view host -> Not Authorized

Posted: Tue Jun 26, 2012 12:56 pm
by jbennett
yes, they can see these hosts and the detail about them if they check throug core.

Re: view host -> Not Authorized

Posted: Wed Jun 27, 2012 11:27 am
by lmiltchev
If you can see these hosts in Core, there must be something weird with ndoutils. Try the following:

Log in XI in terminal and run:

Code: Select all

tail -f /var/log/messages &> debug.txt
Attempt to Apply Configuration from the web interface. After configuration has been applied, press Ctrl+C to stop the log tail and post the "debug.txt" file, that was generated by the above instructions.